149 lines
3.5 KiB
Text
149 lines
3.5 KiB
Text
# =============================================================================
|
|
# ~/.config/.gitignore
|
|
#
|
|
# This file is designed to keep the risky, machine-specific and generated
|
|
# parts of ~/.config out of a repository. Only commit plain, portable configs.
|
|
#
|
|
# BEFORE YOU COMMIT (in this order):
|
|
# 1. Run a secret scanner (e.g. `gitleaks detect` or `trufflehog`).
|
|
# 2. Re-read the "CREDENTIALS / SECRETS" section below and confirm nothing
|
|
# sensitive is still tracked: `git status` and `git ls-files`.
|
|
# 3. Remember these tokens were live on disk; rotate any that may have
|
|
# already been synced or backed up.
|
|
# =============================================================================
|
|
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# CREDENTIALS / SECRETS (live tokens and keys found here)
|
|
# -----------------------------------------------------------------------------
|
|
# GitHub OAuth token with repo+workflow scopes
|
|
github-copilot/
|
|
|
|
# Epic Games access/refresh tokens
|
|
heroic/
|
|
|
|
# Deezer client_secret + music-service login tokens
|
|
OrpheusDL-GUI/
|
|
|
|
# Discord account token (localStorage), cookies, chat cache
|
|
discord/
|
|
|
|
# Discord bot token, cookies, session
|
|
DiscordBotClient/
|
|
|
|
# JetBrains license/account key files
|
|
JetBrains/
|
|
|
|
# TLS private keys, password hashes, paired device certificates
|
|
sunshine/
|
|
Moonlight Game Streaming Project/
|
|
|
|
# opencode API secret (service.json) — keep opencode.json/cli.json/themes
|
|
opencode/service.json
|
|
|
|
# VPN session/cache and logs
|
|
Mullvad VPN/
|
|
|
|
# Torrent client config can hold WebUI credentials/hash
|
|
qBittorrent/
|
|
|
|
# Google OAuth session cookies + localStorage (AI IDE)
|
|
Antigravity/
|
|
|
|
# VS Code: cookies, localStorage, sessionStorage,
|
|
# User/globalStorage/state.vscdb (GitHub auth, extension secrets)
|
|
Code/
|
|
|
|
# Spotify account id / prefs
|
|
spotify/
|
|
|
|
# Generic catch-all for secrets that may appear elsewhere
|
|
**/service.json
|
|
**/*.pem
|
|
**/*.key
|
|
**/credentials/
|
|
**/oauth.json
|
|
**/loginstorage.bin
|
|
**/id_rsa*
|
|
**/*.env
|
|
.env.*
|
|
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# BROWSER / ELECTRON APP STATE (cookies, sessions, caches, machine ids)
|
|
# -----------------------------------------------------------------------------
|
|
cef_user_data/
|
|
Electron/
|
|
balenaEtcher/
|
|
|
|
# Chromium profile artifacts wherever they appear
|
|
**/Cookies
|
|
**/Cookies-journal
|
|
**/Local Storage/
|
|
**/Session Storage/
|
|
**/WebStorage/
|
|
**/IndexedDB/
|
|
**/Service Worker/
|
|
**/Network Persistent State
|
|
**/TransportSecurity
|
|
**/Shared Dictionary/
|
|
**/SharedStorage*
|
|
**/Trust Tokens
|
|
**/Trust Tokens-journal
|
|
**/DIPS
|
|
**/Preferences
|
|
**/Secure Preferences
|
|
**/GPUCache/
|
|
**/DawnWebGPUCache/
|
|
**/DawnGraphiteCache/
|
|
**/Code Cache/
|
|
**/Crashpad/
|
|
**/Dictionaries/
|
|
**/blob_storage/
|
|
**/machineid
|
|
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# MACHINE-SPECIFIC / GENERATED STATE (not portable between machines)
|
|
# -----------------------------------------------------------------------------
|
|
dconf/
|
|
glib-2.0/
|
|
gtk-2.0/
|
|
gtk-3.0/
|
|
libreoffice/
|
|
procps/
|
|
pulse/
|
|
rc/
|
|
pcmanfm/
|
|
libfm/
|
|
go/
|
|
menus/
|
|
nitrogen/
|
|
obs-studio/
|
|
UNDERTALE/
|
|
vlc/
|
|
kritarc
|
|
kritadisplayrc
|
|
dconf/user
|
|
|
|
# fastfetch logos are huge (~576 MB) and machine-specific branding
|
|
fastfetch/logos/
|
|
|
|
# Application debug/log output
|
|
**/logs/
|
|
**/*.log
|
|
**/*.log.*
|
|
**/logs-*.log
|
|
|
|
|
|
# -----------------------------------------------------------------------------
|
|
# EDITOR / OS NOISE
|
|
# -----------------------------------------------------------------------------
|
|
.DS_Store
|
|
Thumbs.db
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
*.bak
|
|
*.tmp
|
|
*.old
|